Privacy Policy

Last updated: 7 April 2026

1. Introduction

Legal Brain (operated by Market Lead Pty Ltd, ABN to be confirmed, "we", "us", "our") is committed to protecting your privacy and complying with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and all applicable state and territory privacy legislation.

This Privacy Policy explains how we collect, hold, use, disclose, and protect personal information in connection with the Legal Brain platform ("Platform"), including the website at legalbrain.com.au and the application at app.legalbrain.com.au.

2. Information We Collect

2.1 Information You Provide

• Account information: Name, email address, mobile number, law firm name, and professional role when you register or request early access.
• Usage data: Queries submitted to the Platform, documents uploaded, and research conducted.
• Communications: Any correspondence you send to us, including support requests and feedback.

2.2 Information Collected Automatically

• Analytics data: We use Google Analytics and Microsoft Clarity to collect anonymised usage data including pages visited, session duration, device type, and general geographic location.
• Technical data: IP address, browser type, operating system, and referring URLs.
• Cookies: We use essential cookies for Platform functionality and analytics cookies for performance monitoring.

3. PII Anonymisation and Data Processing

This is a critical feature of Legal Brain. When you submit queries or documents through the Platform:

• All personally identifiable information (PII) within your queries and documents is automatically removed before any data is transmitted to our AI processing engine.
• PII detected and removed includes: names, addresses, phone numbers, Australian Business Numbers (ABNs), email addresses, and many additional identifying patterns.
• Original references are restored after processing is complete.
• Our AI processing partners never receive identifiable client data.

4. How We Use Your Information

We use your personal information to:

• Provide, maintain, and improve the Platform and its features.
• Process your early access request and communicate with you about your account.
• Send you important updates about the Platform, including security notices and policy changes.
• Analyse usage patterns to improve Platform performance and user experience.
• Comply with legal obligations and enforce our Terms of Service.

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

5. Disclosure of Information

We may disclose your personal information to:

• Service providers: Third-party services that assist in operating the Platform, including hosting, analytics, and AI processing providers. These providers are bound by their own privacy obligations.
• Legal requirements: Where required by law, regulation, legal process, or governmental request.
• Protection of rights: Where necessary to protect our rights, safety, or property, or the rights, safety, or property of our users or the public.

6. Data Storage and Security

• Account data is stored securely with industry-standard encryption.
• Platform data (queries, documents, matters) is stored securely and kept under your control.
• Passwords are hashed using industry-standard algorithms. Two-factor authentication is available.
• All data transmission uses TLS/HTTPS encryption.
• We implement comprehensive security controls including CSRF protection, rate limiting, and intrusion detection.
• Data isolation ensures users cannot access other users' data.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Platform services. If you request deletion of your account, we will delete your personal information within 30 days, except where retention is required by law.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or outdated information.
• Request deletion of your personal information.
• Opt out of marketing communications at any time.
• Lodge a complaint with us or the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

9. Third-Party Services

The Platform integrates with the following third-party services:

• Anthropic (Claude AI): AI processing engine. Only anonymised, PII-stripped data is transmitted. Subject to Anthropic's privacy policy.
• AustLII: Legal database searches. No personal information is transmitted.
• Cloudflare: Website hosting and security. Subject to Cloudflare's privacy policy.
• Google Analytics / Microsoft Clarity: Anonymised usage analytics.

10. Children's Privacy

The Platform is designed for legal professionals and is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

11. International Data Transfers

Some of our service providers operate outside Australia. Where personal information is transferred overseas, we take reasonable steps to ensure the recipient complies with the APPs or is subject to a substantially similar privacy regime.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform or sending you an email. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries, requests, or complaints:

• Email: hello@legalbrain.com.au
• Operated by: Market Lead Pty Ltd, Melbourne, Victoria, Australia

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).